INCIDENT 2026-08-30 14:04:55 trigger: php_rss=1586MB ================================================================== load: 1.58 1.74 1.43 2/644 461186 ncpu:10 mem_avail: 7093MB/13777MB (51.5%) swap_used:1767MB swapout:0/s blocked(D):0 running:2 iowait:0.0% steal:0.0% php: 12 procs / 1586MB heaviest user: madalice (9 procs, 1422MB) apache: 15 procs tcp_estab: 21 --- RSS by user (all processes) --- USER PROCS RSS_MB mysql 1 3018 madalice 9 1422 root 248 971 nobody 14 251 netdata 7 199 alison 2 146 mailman 20 121 cpanellogin 1 75 dovenull 6 46 wp-toolkit 3 31 kurri 2 27 mailnull 1 24 zabbix 1 22 evolution 5 22 vinesit 1 21 dovecot 3 19 named 1 15 lowrange 1 14 polkitd 1 5 nscd 1 4 --- php workers by user --- USER PROCS RSS_MB madalice 9 1422 alison 1 132 root 1 22 evolution 1 13 --- vm tuning / memory pressure --- vm.swappiness 30 vm.vfs_cache_pressure 100 vm.min_free_kbytes 67584 vm.overcommit_memory 0 vm.overcommit_ratio 50 Cached: 5278 MB Active(file): 4710 MB Inactive(file): 943 MB Dirty: 0 MB Writeback: 0 MB SReclaimable: 603 MB CommitLimit: 10984 MB Committed_AS: 8017 MB --- backup / dump / scan processes (page-cache evictors) --- PID USER ELAPSED RSS_KB COMMAND 443313 root 04:54 1240 /bin/sh -c bash -c 'sleep $((RANDOM % 1800))' ;imunify-antivirus imunify-patch subscriptions refresh > /dev/null 2>&1 489033 root 2-11:46:16 7704 /usr/bin/imunify-agent-proxy --- top 60 by RSS --- PID PPID USER RSS %CPU STAT ELAPSED COMMAND 506671 1 mysql 3091080 7.2 Ssl 2-11:45:45 /usr/sbin/mariadbd 2328310 2277352 root 207808 0.0 S 11:26:45 spamd child 508924 1 netdata 179252 1.9 Ssl 2-11:45:14 /usr/sbin/netdata -P /run/netdata/netdata.pid -D 2277352 1 root 175488 0.0 Ss 11:41:51 /usr/local/cpanel/3rdparty/perl/542/bin/perl -T -w /usr/local/cpanel/3rdparty/bin/spamd --allowed-ips=127.0.0.1,::1 --max-children=5 -- 2328311 2277352 root 164208 0.0 S 11:26:45 spamd child 459403 510022 madalice 163960 18.7 S 02:12 php-fpm: pool madalice_com_au 459401 510022 madalice 163680 18.5 S 02:12 php-fpm: pool madalice_com_au 459136 510022 madalice 163188 19.8 S 02:52 php-fpm: pool madalice_com_au 459402 510022 madalice 163144 17.8 S 02:12 php-fpm: pool madalice_com_au 459400 510022 madalice 162756 18.5 S 02:12 php-fpm: pool madalice_com_au 459404 510022 madalice 160516 19.1 S 02:12 php-fpm: pool madalice_com_au 459877 510022 madalice 160496 8.8 S 01:36 php-fpm: pool madalice_com_au 459405 510022 madalice 160012 18.6 S 02:11 php-fpm: pool madalice_com_au 459883 510022 madalice 158524 8.8 S 01:36 php-fpm: pool madalice_com_au 461157 460801 alison 141492 103 R 00:01 /opt/cpanel/ea-php82/root/usr/bin/php-cgi 4027958 1353308 cpanellogin 77296 0.0 S 03:06:42 /usr/local/cpanel/base/show_template.stor cpanel_locale docroot /usr/local/cpanel/base server_locale en default_login_theme cpanel 509236 509098 root 52956 0.0 Sl 2-11:45:11 /opt/saltstack/salt/bin/python3.10 /usr/bin/salt-minion MultiMinionProcessManager MinionProcessManager 509640 508992 root 49684 0.0 Sl 2-11:45:09 /usr/libexec/netdata/plugins.d/ebpf.plugin 1 1353308 1 root 42536 0.1 Ss 39-11:23:37 cpsrvd (SSL) - waiting for connections 2275833 1 root 35932 0.0 Ss 11:42:41 lfd - sleeping 508720 1 mailnull 25296 0.0 Ss 2-11:45:18 /usr/sbin/exim -ps -bd -q15m -oP /var/spool/exim/exim-daemon.pid 442833 506832 nobody 24460 0.0 S 05:40 /usr/sbin/httpd -k start 1469 1 root 24048 0.1 Ss 62-03:55:06 cpdavd - accepting connections on: 2079, 2080, 2091, 2077, 2078 510022 1 root 23340 0.0 Ss 2-11:45:07 php-fpm: master process (/opt/cpanel/ea-php83/root/etc/php-fpm.conf) 483898 1 zabbix 23180 0.2 Ssl 2-11:46:28 /usr/sbin/zabbix_agent2 -c /etc/zabbix/zabbix_agent2.conf 425659 508511 vinesit 22336 0.0 S 11:18 dovecot/imap 442834 506832 nobody 22336 0.2 S 05:40 /usr/sbin/httpd -k start 1463 1 root 21968 0.0 Ss 62-03:55:06 tailwatchd 459379 506832 nobody 21872 0.1 S 02:18 /usr/sbin/httpd -k start 459381 506832 nobody 21800 0.0 S 02:18 /usr/sbin/httpd -k start 459387 506832 nobody 20940 0.0 S 02:17 /usr/sbin/httpd -k start 459390 506832 nobody 20860 0.2 S 02:17 /usr/sbin/httpd -k start 459389 506832 nobody 20644 0.1 S 02:17 /usr/sbin/httpd -k start 460801 506832 nobody 20316 0.1 S 00:46 /usr/sbin/httpd -k start 459873 506832 nobody 20192 0.1 S 01:39 /usr/sbin/httpd -k start 460786 506832 nobody 19564 0.0 S 00:48 /usr/sbin/httpd -k start 460836 506832 nobody 19008 0.0 S 00:41 /usr/sbin/httpd -k start 938582 1 wp-toolkit 18068 0.0 Ss 2-09:52:48 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script background-tasks-executor.php 461153 506832 nobody 17476 0.0 S 00:06 /usr/sbin/httpd -k start 1471 1 root 16968 0.0 Ss 62-03:55:06 cPhulkd - processor 3446928 1471 root 16856 0.0 S 05:59:06 cPhulkd - dbprocessor 3960981 508511 kurri 16160 0.0 S 03:25:01 dovecot/imap 509671 508992 netdata 15776 2.1 Sl 2-11:45:09 /usr/libexec/netdata/plugins.d/apps.plugin 1 508634 1 named 15660 0.0 Ssl 2-11:45:19 /usr/sbin/pdns_server --socket-dir=/run/pdns --guardian=no --daemon=no --disable-syslog --log-timestamp=no --write-pid=no 306633 508511 alison 15336 0.0 S 48:28 dovecot/imap 390314 508511 lowrange 14500 0.0 S 23:10 dovecot/imap 4180059 4180015 evolution 13364 0.0 Ss 2-14:04:56 /opt/cpanel/ea-php74/root/usr/bin/php-cgi /home/evolution/my.evolutionerp.com.au/cron/xero2.php 460832 508511 root 12720 0.0 S 00:42 dovecot/auth -w 3883280 508511 kurri 12364 0.0 S 1-00:03:06 dovecot/imap 938585 1 wp-toolkit 11432 0.0 Ss 2-09:52:48 /usr/bin/sw-engine /usr/local/cpanel/3rdparty/wp-toolkit/bin/run-script scheduled-tasks-executor.php 508518 508511 dovenull 10868 0.0 S 2-11:45:19 dovecot/imap-login 506832 1 root 10216 0.0 Ss 2-11:45:44 /usr/sbin/httpd -k start 508514 508511 dovenull 10000 0.0 S 2-11:45:19 dovecot/imap-login 508529 508511 dovecot 9476 0.0 S 2-11:45:19 dovecot/auth 481558 1 root 9412 0.1 Ssl 2-11:47:38 /usr/libexec/platform-python -Es /usr/sbin/tuned -l -P 454473 1 root 9076 0.0 Ss 2-11:51:19 queueprocd - waiting up to 60s to process a task 508519 508511 dovenull 8888 0.0 S 2-11:45:19 dovecot/pop3-login 508516 508511 dovenull 8632 0.0 S 2-11:45:19 dovecot/pop3-login 508856 508814 mailman 8236 0.0 S 2-11:45:17 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=IncomingRunner:3:4 -s 508865 508814 mailman 8216 0.0 S 2-11:45:17 /usr/bin/python3 /usr/local/cpanel/3rdparty/mailman/bin/qrunner --runner=OutgoingRunner:7:8 -s --- processes in D state (uninterruptible IO) --- --- mariadb processlist (non-sleeping) --- +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | ID | USER | DB | COMMAND | TIME | STATE | q | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 4527421 | root | NULL | Query | 0 | Filling schema table | SELECT ID,USER,DB,COMMAND,TIME,STATE,LEFT(INFO,300) q FROM information_schema.PROCESSLIST WHERE COMMAND<>'Sleep' ORDER BY TIME DESC LIMIT 40 | +---------+------+------+---------+------+----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------+ --- lock waits --- --- vhost traffic RIGHT NOW (last 3 min, deduped by inode) --- VHOST LOG REQ/3min madalice/madalice.com.au-ssl_log 203 olytis/tis.com.au-ssl_log 44 evolution/portal.evolutionerp.com.au-ssl_log 26 aaa/aaadownunder.com.au-ssl_log 7 nrg/nrgservices.net.au-ssl_log 2 olympic/olympicfencing.com.au-ssl_log 2 speedlin/speedlinefencing.com.au-ssl_log 2 alison/alisonarts.com.au-ssl_log 1 infinium/infinium.net.au-ssl_log 1 kamcool/kamcool.com.au-ssl_log 1 olympic/olympicfencing.com.au 1 (total vhosts taking traffic: 11) --- top client IPs across all vhosts (last 3 min) --- 169 34.175.206.134 44 20.220.10.235 26 203.54.180.238 11 118.127.40.55 6 54.236.1.4 4 206.189.22.215 4 101.118.119.49 3 45.148.10.120 3 114.119.131.88 2 82.80.249.243 2 45.59.124.89 2 216.73.216.20 2 114.119.130.40 1 45.162.210.114 1 45.160.239.120 --- top request paths across all vhosts (last 3 min) --- 26 GET /heartbeat.php 18 GET / 13 POST / 4 POST /wp-login.php 4 GET /store/custom-melbourne-kids/ 4 GET /.git/config 3 POST /wp-cron.php 3 GET /@fs/proc/self/environ 3 GET /@fs/proc/self/cwd/.env.production 3 GET /@fs/proc/self/cwd/.env.local 3 GET /@fs/proc/self/cwd/.env 3 GET /@fs/etc/passwd 2 GET /store/custom-manly-sea-eagles-kids/ 2 GET /store/adidas-superstar-cartoon-style/ 2 GET /dashboard 2 GET /admin 1 POST /wp-admin/admin-ajax.php 1 GET /.zsh_history 1 GET /zoz.php 1 GET /xwpg.php --- busiest 3 vhosts: top paths + last 10 requests --- == madalice/madalice.com.au-ssl_log == -- top paths -- 13 POST / 12 GET / 4 GET /store/custom-melbourne-kids/ 3 GET /@fs/proc/self/environ 3 GET /@fs/proc/self/cwd/.env.production 3 GET /@fs/proc/self/cwd/.env.local 3 GET /@fs/proc/self/cwd/.env 3 GET /@fs/etc/passwd 2 GET /store/custom-manly-sea-eagles-kids/ 2 GET /store/adidas-superstar-cartoon-style/ 2 GET /.git/config 2 GET /dashboard -- last 10 requests -- 34.175.206.134 - - [30/Aug/2026:14:04:24 +1000] "GET /admin HTTP/1.1" 302 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.236.1.4 - - [30/Aug/2026:14:04:26 +1000] "GET / HTTP/1.1" 200 42738 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 34.175.206.134 - - [30/Aug/2026:14:04:26 +1000] "GET /dashboard HTTP/1.1" 302 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 223.74.187.105 - - [30/Aug/2026:14:04:26 +1000] "GET /store/adidas-superstar-cartoon-style/ HTTP/1.1" 200 54355 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 161.153.104.250 - - [30/Aug/2026:14:04:27 +1000] "GET /product-tag/nrl HTTP/1.1" 301 1 "-" "Mozilla/5.0 (X11; Linux aarch64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/139.0.0.0 Safari/537.36" 34.175.206.134 - - [30/Aug/2026:14:04:27 +1000] "GET /dashboard HTTP/1.1" 302 1 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.175.206.134 - - [30/Aug/2026:14:04:29 +1000] "GET /api/admin HTTP/1.1" 404 36642 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 54.236.1.4 - - [30/Aug/2026:14:04:29 +1000] "GET / HTTP/1.1" 200 42736 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 34.175.206.134 - - [30/Aug/2026:14:04:31 +1000] "GET /panel HTTP/1.1" 404 36643 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.175.206.134 - - [30/Aug/2026:14:04:32 +1000] "GET /settings HTTP/1.1" 404 36637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" == olytis/tis.com.au-ssl_log == -- top paths -- 1 GET /zoz.php 1 GET /xwpg.php 1 GET /xda.php 1 GET /wp-login.php 1 GET /wp-content/plugins/hellopress/wp_filemanager.php 1 GET /wp-content/admin.php 1 GET /wp-admin/maint/Jcrop.php 1 GET /wp-admin/js/index.php 1 GET /wp-access.php 1 GET /wk/index.php 1 GET /wefile.php 1 GET /update/da222.php -- last 10 requests -- 20.220.10.235 - - [30/Aug/2026:14:04:20 +1000] "GET /admin.php/pindex.php HTTP/1.1" 404 5750 "-" "-" 20.220.10.235 - - [30/Aug/2026:14:04:20 +1000] "GET /admin.php/csv.php HTTP/1.1" 404 5750 "-" "-" 20.220.10.235 - - [30/Aug/2026:14:04:21 +1000] "GET /admin.php/700.php HTTP/1.1" 404 5750 "-" "-" 20.220.10.235 - - [30/Aug/2026:14:04:21 +1000] "GET /admin.php/007x.php HTTP/1.1" 404 5750 "-" "-" 20.220.10.235 - - [30/Aug/2026:14:04:22 +1000] "GET /admin.php/heex.php HTTP/1.1" 404 5750 "-" "-" 20.220.10.235 - - [30/Aug/2026:14:04:22 +1000] "GET /tf.php HTTP/1.1" 404 5750 "-" "-" 20.220.10.235 - - [30/Aug/2026:14:04:23 +1000] "GET /update/da222.php HTTP/1.1" 404 5750 "-" "-" 20.220.10.235 - - [30/Aug/2026:14:04:23 +1000] "GET /qi.php HTTP/1.1" 404 5750 "-" "-" 20.220.10.235 - - [30/Aug/2026:14:04:23 +1000] "GET /px.php HTTP/1.1" 404 5750 "-" "-" 20.220.10.235 - - [30/Aug/2026:14:04:24 +1000] "GET /is.php HTTP/1.1" 404 5750 "-" "-" == evolution/portal.evolutionerp.com.au-ssl_log == -- top paths -- 26 GET /heartbeat.php -- last 10 requests -- 203.54.180.238 - - [30/Aug/2026:14:03:23 +1000] "GET /heartbeat.php?sentAt=1788062603&bytes=106,147,171,139&_=1787897056911 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:14:03:23 +1000] "GET /heartbeat.php?sentAt=1788062603&bytes=106,147,171,139&_=1787918095396 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:14:03:33 +1000] "GET /heartbeat.php?sentAt=1788062613&bytes=106,147,171,149&_=1787897056912 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:14:03:33 +1000] "GET /heartbeat.php?sentAt=1788062613&bytes=106,147,171,149&_=1787918095397 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:14:03:43 +1000] "GET /heartbeat.php?sentAt=1788062623&bytes=106,147,171,159&_=1787897056913 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:14:03:43 +1000] "GET /heartbeat.php?sentAt=1788062623&bytes=106,147,171,159&_=1787918095398 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:14:03:53 +1000] "GET /heartbeat.php?sentAt=1788062633&bytes=106,147,171,169&_=1787897056914 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:14:03:53 +1000] "GET /heartbeat.php?sentAt=1788062633&bytes=106,147,171,169&_=1787918095399 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:14:04:03 +1000] "GET /heartbeat.php?sentAt=1788062643&bytes=106,147,171,179&_=1787897056915 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 203.54.180.238 - - [30/Aug/2026:14:04:03 +1000] "GET /heartbeat.php?sentAt=1788062643&bytes=106,147,171,179&_=1787918095400 HTTP/1.1" 200 10 "https://portal.evolutionerp.com.au/index.php?page=factory_proc_queue&process=6 --- last 30 samples (run-up to this incident) --- 2026-08-30 14:02:34 L1=1.14 run=2 blk=0 avail=8098 (58.8%) swpO=0 conn=2 myRSS=3018 php=4 phpRSS=396 ap=15 tcp=26 topuser=madalice 2026-08-30 14:02:35 L1=1.14 run=1 blk=0 avail=8137 (59.1%) swpO=0 conn=1 myRSS=3018 php=4 phpRSS=351 ap=15 tcp=25 topuser=madalice 2026-08-30 14:02:44 L1=1.75 run=11 blk=0 avail=7083 (51.4%) swpO=1 conn=2 myRSS=3018 php=10 phpRSS=1452 ap=27 tcp=34 topuser=madalice 2026-08-30 14:02:45 L1=1.75 run=6 blk=0 avail=7128 (51.7%) swpO=1 conn=1 myRSS=3018 php=10 phpRSS=1397 ap=27 tcp=33 topuser=madalice 2026-08-30 14:02:54 L1=2.86 run=7 blk=0 avail=6888 (50.0%) swpO=0 conn=5 myRSS=3018 php=11 phpRSS=1655 ap=30 tcp=35 topuser=madalice 2026-08-30 14:02:55 L1=2.86 run=6 blk=0 avail=6989 (50.7%) swpO=0 conn=6 myRSS=3018 php=11 phpRSS=1561 ap=29 tcp=35 topuser=madalice 2026-08-30 14:03:05 L1=3.10 run=7 blk=0 avail=7128 (51.7%) swpO=0 conn=5 myRSS=3018 php=10 phpRSS=1398 ap=27 tcp=36 topuser=madalice 2026-08-30 14:03:05 L1=3.10 run=8 blk=0 avail=7065 (51.3%) swpO=0 conn=6 myRSS=3018 php=10 phpRSS=1462 ap=27 tcp=36 topuser=madalice 2026-08-30 14:03:15 L1=3.39 run=6 blk=0 avail=7188 (52.2%) swpO=0 conn=5 myRSS=3018 php=10 phpRSS=1339 ap=25 tcp=38 topuser=madalice 2026-08-30 14:03:15 L1=3.39 run=7 blk=0 avail=7157 (51.9%) swpO=0 conn=6 myRSS=3018 php=10 phpRSS=1369 ap=26 tcp=38 topuser=madalice 2026-08-30 14:03:25 L1=3.09 run=2 blk=0 avail=6915 (50.2%) swpO=0 conn=1 myRSS=3018 php=12 phpRSS=1613 ap=32 tcp=39 topuser=madalice 2026-08-30 14:03:25 L1=3.09 run=1 blk=0 avail=6916 (50.2%) swpO=0 conn=1 myRSS=3018 php=12 phpRSS=1613 ap=32 tcp=39 topuser=madalice 2026-08-30 14:03:35 L1=2.86 run=2 blk=0 avail=6999 (50.8%) swpO=0 conn=2 myRSS=3018 php=12 phpRSS=1616 ap=22 tcp=28 topuser=madalice 2026-08-30 14:03:35 L1=2.86 run=2 blk=0 avail=6996 (50.8%) swpO=0 conn=2 myRSS=3018 php=12 phpRSS=1619 ap=22 tcp=28 topuser=madalice 2026-08-30 14:03:45 L1=2.49 run=2 blk=0 avail=7034 (51.1%) swpO=0 conn=2 myRSS=3018 php=12 phpRSS=1616 ap=17 tcp=22 topuser=madalice 2026-08-30 14:03:45 L1=2.49 run=3 blk=0 avail=7032 (51.0%) swpO=0 conn=2 myRSS=3018 php=12 phpRSS=1617 ap=17 tcp=22 topuser=madalice 2026-08-30 14:03:55 L1=2.33 run=4 blk=0 avail=7053 (51.2%) swpO=0 conn=2 myRSS=3018 php=12 phpRSS=1614 ap=17 tcp=24 topuser=madalice 2026-08-30 14:03:55 L1=2.33 run=3 blk=0 avail=7046 (51.1%) swpO=0 conn=2 myRSS=3018 php=12 phpRSS=1616 ap=17 tcp=24 topuser=madalice 2026-08-30 14:04:05 L1=1.97 run=1 blk=0 avail=7066 (51.3%) swpO=0 conn=1 myRSS=3018 php=12 phpRSS=1611 ap=14 tcp=25 topuser=madalice 2026-08-30 14:04:06 L1=1.97 run=3 blk=0 avail=7065 (51.3%) swpO=0 conn=1 myRSS=3018 php=12 phpRSS=1611 ap=14 tcp=25 topuser=madalice 2026-08-30 14:04:15 L1=2.12 run=3 blk=0 avail=6852 (49.7%) swpO=0 conn=3 myRSS=3018 php=14 phpRSS=1815 ap=21 tcp=31 topuser=madalice 2026-08-30 14:04:16 L1=2.12 run=7 blk=0 avail=6745 (49.0%) swpO=0 conn=4 myRSS=3018 php=14 phpRSS=1942 ap=21 tcp=32 topuser=madalice 2026-08-30 14:04:25 L1=2.19 run=3 blk=0 avail=6902 (50.1%) swpO=0 conn=4 myRSS=3018 php=13 phpRSS=1770 ap=20 tcp=31 topuser=madalice 2026-08-30 14:04:26 L1=2.19 run=3 blk=0 avail=7055 (51.2%) swpO=0 conn=3 myRSS=3018 php=12 phpRSS=1585 ap=20 tcp=29 topuser=madalice 2026-08-30 14:04:35 L1=1.93 run=3 blk=0 avail=7104 (51.6%) swpO=0 conn=2 myRSS=3018 php=11 phpRSS=1514 ap=19 tcp=22 topuser=madalice 2026-08-30 14:04:36 L1=1.93 run=1 blk=0 avail=7156 (51.9%) swpO=0 conn=3 myRSS=3018 php=11 phpRSS=1458 ap=19 tcp=22 topuser=madalice 2026-08-30 14:04:45 L1=1.78 run=2 blk=0 avail=7177 (52.1%) swpO=0 conn=2 myRSS=3018 php=11 phpRSS=1461 ap=16 tcp=24 topuser=madalice 2026-08-30 14:04:46 L1=1.78 run=2 blk=0 avail=7173 (52.1%) swpO=0 conn=3 myRSS=3018 php=11 phpRSS=1462 ap=16 tcp=25 topuser=madalice 2026-08-30 14:04:55 L1=1.58 run=2 blk=0 avail=7093 (51.5%) swpO=0 conn=2 myRSS=3018 php=12 phpRSS=1586 ap=15 tcp=21 topuser=madalice 2026-08-30 14:04:56 L1=1.58 run=2 blk=0 avail=7185 (52.2%) swpO=0 conn=3 myRSS=3018 php=11 phpRSS=1457 ap=15 tcp=20 topuser=madalice